Creating Application Filters
NOTE: If you are creating an application filter to be used with local on-prem resolution, then you must add Allow - Local Resolution as the default action to your security policy. Application filters are available to subscribers |
of Infoblox Threat Defense Advanced. For more information on how to add an action to a security policy, see Adding Policy Rules and Setting Precedence. |
| Note |
|---|
Reporting Incorrect Data: To report incorrect data, submit the Dossier Threat Research Feedback from. For information, see Dossier Threat Research Feedback. |
To create an application filter, complete the following:
From the Cloud Services Infoblox Portal, click Policies -> Security Configure > Security > Policies.
On the Security Policies page, click the Filters tab located above the top Action bar.
On the Filters page, click Create Filter on the top Action bar.
From among the options displayed (Create Category Filter or Create App Filter), click Create App Filter.
On the Create Application Filter page, complete the following:
Name: Enter a name for the content application filter. Ensure that you use a unique name for each filter. This is a required field.
Description: Enter a brief description of the filter. You can enter up to 256 characters.
From the applications list, APPLICATIONS, expand the AVAILABLE list by clicking on the respective arrow next to the application type. Within each application category, sub categories are listed. You can add an entire application category or select among the subcategories to include in your application filtering policy. Application category filter/subcategory filter types include:
Application Categories | Application Subcategories |
|---|---|
Business App Suite | 163 Cloud |
Generative AI | AI Companions |
163 Email | |
Cloud Backup and Storage | 1fichier Cloud |
Communication | 8x8 |
Content Delivery Network (CDN) | Akamai CDN |
Other | AddThis |
Platform as a Service (PaaS) |
ACM |
ACM
ACM Private CA
Kinesis Data Streams
Kinesis Video Streams
Alexa for Business
Amplify
Mechanical Turk
Organizations
API Gateway
AWS AppConfig
Application Discovery Service
Amazon AppFlow
CloudWatch Application Insights
Amazon CloudSearch |
AWS AppSync
Resource Groups and Tagging
Auto Scaling
Application Auto Scaling
Secrets Manager
Athena
Audit Manager
|
Import/Export |
KMS |
Billing and Cost Management
AWS Backup
Braket
CloudFormation
CloudFront
AWS Chatbot
Amazon Chime
AWS Cloud9
Cloud Control API
Cloud Directory
AWS CloudHSM
AWS Cloud Map
Amazon CloudSearch
CloudShell
CodeArtifact
CodeBuild
CodeCommit
CodeDeploy
CodeGuru Profiler
CodeGuru Reviewer
CodePipeline
AWS CodeStar
AWS CodeStar Notifications
Amazon Cognito Identity
Amazon Cognito Sync
Amazon Comprehend
Amazon Comprehend Medical
Compute Optimizer
Amazon Connect
Amazon Corretto 11
CloudTrail
CloudWatch
Launch Wizard |
CloudWatch Synthetics
DataBrew
AWS Data Exchange
AWS Data Pipeline
DataSync
AWS Direct Connect
DynamoDB
AWS DeepLens
AWS DeepRacer
Synthetics |
Amazon Data Lifecycle Manager
AWS DMS
Elastic Disaster Recovery
AWS Directory Service
Amazon EBS
|
Amazon EC2
Amazon ECR
Amazon ECS
Amazon EKS
ElastiCache |
Elastic Disaster Recovery |
Amazon EMR
|
Firewall Manager |
Forecast |
Amazon FSx
GameLift
S3 Glacier
Foxit Software |
Amazon Managed Grafana
AWS IoT Greengrass V1
AWS IoT Greengrass V2
AWS Ground Station
Google Play |
EC2 Image Builder
IAM Access Analyzer |
AWS IoT Analytics
AWS IoT Core
AWS IoT Device Management
AWS IoT Events
AWS IoT RoboRunner
AWS IoT SiteWise
AWS IoT Things Graph
AWS IoT TwinMaker
Amazon IVS
Kinesis Data Analytics
Amazon Kendra
Amazon Keyspaces
AWS KMS
Lake Formation
Lambda
AWS Launch Wizard
Amazon Lex
Kaseya VSA |
AWS Mainframe Migration
Macie |
AWS Management Console
Application Migration Service
Migration Hub
AWS Migration Hub Refactor Spaces
Microsoft |
Mimecast |
Amazon MSK Connect
Amazon MWAA
mPulse |
AWS Outposts
Amazon Personalize
Amazon Pinpoint
Amazon Polly
Amazon Managed Service for Prometheus
AWS Proton
QLDB
Amazon QuickSight
Route 53
AWS RAM
Amazon RDS
Amazon Redshift
Amazon Rekognition
Resilience Hub
AWS RoboMaker
Amazon S3
SageMaker
Amazon SimpleDB
Security Hub
AWS Serverless Application Repository
AWS SMS
AWS Service Catalog
Service Quotas
Amazon SES
Storage Gateway
Shield Advanced
AWS Signer
AWS Sign-In
Snow Family
Amazon SNS
Amazon SQS
AWS Systems Manager
AWS SSO
Step Functions
AWS STS
Amazon SWF
Amazon Textract
Timestream
Amazon Transcribe
Transfer Family
Amazon Translate
Amazon VPC
AWS WAF Classic
AWS WAF
AWS Well-Architected Tool
Amazon WorkDocs
Amazon WorkLink
Amazon WorkMail
WorkSpaces
X-Ray
Boomi
Degoo
Google Play
Google Tag Manager
Software Development
Business App
Attendant Pro
AutoHotKey
Egnyte
Foxit Software
Granicus IQM2
KLCP
Microsoft
Microsoft Sharepoint
Microsoft Wallet app
mPulse
nextcloud
Okta
Oracle Advanced Support Gateway
RISA
Skype for Business
Smart Adserver Dashboard
Splunk
Taboola Backstage
Trello
Vorex
XMind
Security
BitDefender
CCleaner
Datadog
Devolutions Server
Digicert
Duo
Google Safe Browsing
ibossConnect
Kaseya VSA
KeePass
Microsoft Certificates
Mimecast
OPSWAT Mobile App
Qualys Time Server
Symantec Messaging Gateway
OPSWAT Mobile App | |
Software Development | Apache Software Foundation |
Launch Darkly
Comprehensive R Archive Network (CRAN) | |
Business App | Attendant Pro |
Security | BitDefender |
Video Conferencing | Blue Jeans |
Information Technology | Bright Sign |
Consumer Services | Amazon Shopping |
Remote Connectivity | code4ward |
Endpoint Protection | ePO |
VPNs & Proxies | express_vpn |
Social Networking | Facebook |
Search Engines | Bing |
Vulnerability Scanner | Nessus |
7. From the From the AVAILABLE list select the checkboxes of the specific sub-applications you want to
include in the rule, and then use the arrows to move the selected subcategories from the
AVAILABLE list to the SELECTED list. You can include as many applications and sub-applications as
you want based on your needs.
8. To remove a sub-application from the SELECTED list, click the X located to the right of the sub-
application's name.
9. Click Save & Close to save or Cancel to cancel the configuration. BloxOne Threat Defense Infoblox Cloud adds
the application filter to the list. You can now add the application filter to a security policy or to multiple
policies. For more information, see Configuring Security Policies.
NOTE: You cannot remove an existing application filter if it has been added and assigned an action in any security policies. |